CVE-2024-9195

creationtimestamp| type| source ---|---|--- 2025-02-28 09:27:26+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5855 2025-02-28 11:10:26+00:00| seen| https://t.me/cvedetector/19138 2025-02-28 11:48:47+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114081354477370456...

CVE-2024-9195 WHMPress - WHMCS Client Area <= 4.3-revision-3- Authenticated (Subscriber+) Arbitrary Options Update

The WHMPress - WHMCS Client Area plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the updatesettings case in the /admin/ajax.php file in all versions up to, and including, 4.3-revision-3. This makes ...